MidKnight Gallery

There are three main options for people who wish to run Windows on the Mac. The first is “Boot Camp,” the second is “Fusion” from VMWare, and the last is “Parallels.”

Boot Camp is Apple’s method of partitioning (splitting up) the hard drive so that a separate section of the drive is used to run Windows. Pros? Runs as fast as any other Windows computer with similar hardware. Cons? It requires a total reboot into Windows, and another total restart to get back to your Mac.

Parallels and Fusion instead create a little sandbox that runs in a window while the rest of your Mac is running. This little sandbox pretends that it’s a whole separate computer. Cons? Not as fast as Boot camp, especially if trying to play games. Pros? More than fast enough to run Quickbooks, etc., much easier to switch in and out of (including copying, pasting and file transfers), And you can easily back up your entire virtual windows machine with all your settings intact by copying a disk image.

Which is best? Well, Parallels, from the newer kids on the virtualization block, tends to have the niftiest features first. It tends to run a bit faster. Fusion tends to be slower and more staid. When it catches up features-wise it tends to be implemented smoother and more mac-like. Finally, it tends to be more stable and deal better with any updates that Apple throws around.

I have at least one client actively switching over to Fusion with every computer they buy a copy for or as they update past version 3, because of two issues. One – a time where an Apple update kept them from printing to USB printers out of Paralells for three days. Worse, the fact that two sets of automatic updates have been corrupted and required workarounds to download a valid updater. We discovered the updating issue when trying to get a fix for video display problems within Parallels. I can understand the USB issue – it was in part a matter of timing as Apple had released an almost simultaneous update. The video issue is less forgivable, but also understandable. The problems where two sets of updates failed at different times because the downloaded updater was corrupt is just embarrassing.

Ars Technica, the source of many fine articles related to computers, just published an excellent little primer on how to keep your computer secure. It includes information for Linux and Mac users as well.

One of the many things I cannot stand about Vista and Office 2007 is the packaging. Opening it up is not just a job, it’s an adventure. And a puzzle. So I get some admittedly snarky entertainment to see the following article on Microsoft’s website: Opening the Windows Vista Box

Just discovered another upgrade “gotcha” with Leopard related to Thursby Software’s “DAVE.”

DAVE has been around a long time. Before OSX it allowed Macs to access windows shares and networks with the same credentials/etc. as windows machines. Even when OSX allowed access to Windows file servers and limited Active Directory compatibility Dave and AdmitMac were a much more complete solution, especially when it came to home folders, authenticating to a domain, etc.

Of course, such an extensive system hack intercepting all of the Windows-related CIFS/SMB traffic is likely to break on a major system upgrade, and sure enough it did. If you remembered to remove this before upgrading to Leopard, or first installed the update to version 7, then all was well, and you could still access Windows servers. if you didn’t, your computer would fail to connect.

Fixing this isn’t that tricky, but is non-obvious unless you are paying for an upgrade. In all cases the best way to remove DAVE is to use the removal package (DAVE is one of the few programs on a Mac that really needs an uninstaller). The issue is that the same incompatibility that prevents DAVE from working prevents the version 6 or earlier uninstaller to shut down the services. In this case, download the trial for version 7 (don’t even bother filling out hte form, just download it), and run the uninstaller for version 7. After a restart, your Mac will get back onto SMB servers as reliably as ever.

I’ve been more a fan of the VMWare Fusion virtual windows solution than Parallels, usually because Fusion has had less stability issues (especially relating to one client’s Quickbooks needs) and was just a little more polished. Well, sometimes you find rough spots.

Apparently Fusion assumes the hard drive size never changes. After installing the new HD in my MacBook pro and recovering from backups, everything else worked great, but Fusion couldn’t run the Boot Camp parition. While the error told me it realized the partition map had changed, Fusion would not give me the option of pointing to the new drive.

It was not a difficult fix – I found where Fusion stored the virtual machine file that pointed to the Boot Camp partition and deleted it, allowing Fusion to create a new one.  Nevertheless, VMWare should not assume that people will never change disks or partition maps, and should have provided an option to reset where it should find the Boot Camp partition.

I’ve spent five days with leopard now, installing it four times on three different computers, the most recent one two days ago. It’s left one heck of an impression on me. Mostly favorable. If your Mac can run Leopard, you should install it. The sheer scope of the improvements is worth it. Having another computer, or a .mac account and integration with calendar and other services on a Leopard server will make it even more worthwhile.

Other people have given their short little overviews. Others have released articles in dribs and drabs on different features. Yet others have released a veritable book on the subject. As a result, this review will be heavier on my impressions and what I went through.

I got the install DVD on Friday. The packaging was, as usual, wonderful. I chose my Macbook Pro to install it on as between the three Macs that could be upgraded, it was not only backed up (as they all were), it was the machine I could suffer the most disruptions with.

So in goes the DVD. Reboot, choose “upgrade.” So far so good. I click through the initial menus and let the install procedure start as I go off to make dinner. A while later, my son wanders into the kitchen. “Dad? Is it supposed to have a blue screen?”

Uh-oh. Try the usual precautions. Safe mode boot didn’t work. Doing a file-system check in single user mode proved that the hard drive is still in good shape. I decided it was worth some time doing tinkering. I’d have to help other people out of their troubles after all, so I didn’t want to jump the gun and do an “archive and install” or “clean install”. I may be backed up but I didn’t want to spend hours rebuilding my utilities and preferences.

A little research and I dug up a thread in the Apple Discussion Boards where people were already fighting with the same issue. About halfway down someone had decided to poke around on the premise that a set of system extensions referred to as APE was at fault. APE, or Application Enhancer was a third-party system hack used by Cleardock, Shapeshifter, and other programs that modify the appearance and behavior of the OS. Needless to say this can make the system… unstable.

The official Apple page (recommending an archive and install but giving the instructions I followed) is here. Daring Fireball also has more on the subject, including how the Logitech drivers for mice and keyboards, among other things, can install APE without your knowledge.

So I reboot holding down COMMAND-S on the keyboard into the single-user command-line mode, type in the commands needed to check and mount the hard drive, delete the relevant files, and reboot. Viola! It works.

Finally I got my .mac information set up, verified I still had my mail library and signatures (Mail predictably updated the library) and started to see what changed and testing what broke.

Insofar as the kerfluffle with the stacks and the dock… I don’t mind the new dock, but I prefer to apply the default side-dock format to the dock as it’s cleaner and easier to tell what is running. I found the new stack behavior a little frustrating at first because I had several folder shortcuts that I wanted to go and open up the folder, but most of them I used by right-clicking to get a menu of the contents anyway. So, once I recalibrated my expectations and realized I was trading submenus for easier-to click targets and a slight inconvenience in actually opening up the folders (when actually needed) I was more than happy with the effect. In a roundabout way, this is a return of the “drawers” behavior of OS8 and 9, complete with spring-loaded folders that you can drag files and documents to.

I hate the icons for the stacks. I hate them for the simple fact that as an aggregation of the icons for the contacts, I’m trading a minimum of useless information about the contents of a folder for an easily identifiable target to click on. Without wasting time to hover each one, it’s almost impossible to identify which is which reliably. While I’m not a huge fan of the new dock, and less a fan of the hard-to-differentiate new folder icons, I cannot understate how much I loathe the dock. Please please make it possible to keep a stable icon there!

I discovered to my annoyance that the calendar does not keep a side drawer open with the details of the currently selected event. I can deal with this change because it also makes it clearer when I’m looking at vs. just editing an event, and minimizes screen usage when I don’t need the details. That said, I love the “current time” bar that runs across the window. It did miff me a bit to discover that all of the subscribed folders had been pulled out into their own category from the groups I had them in.

I checked out the new syncing preferences for .mac, and decided to forego the syncing of widgets and preferences. My laptop and desktop have many overlapping uses, but they are fundementally used in different environments (field vs. office) with different tools needed at my fingertips.

Parental controls now allow for remote control of other macs on your local network. Hmmm… so now if all my future computers are macs I can administer the ones my children will use centrally insofar as web access, and get rid of the proxy server I run. I can also set hours for when they can get on online. I can also run Fusion to let my kids play some W98 games like Zoo tycoon… and probably faster than the current old Win machine they have access to.

When waking from sleep, I get to the password prompt consistently faster. The wiki feature in the dictionary is cool, and makes a program I already use regularly vice pulling down my volumes even more useful. I also trashed a “refresh finder” script I had available because Apple finally, finally made it update in a consistently timely manner when new files are added.

Spaces took some time to wrap myself around. The biggest problem was me – trying to figure out a separation of work modes that would allow me to maintain different virtual desktops. That said – if you use it as a clutter remover it works great, because unlike many variants I’d seen, you still have access to all of your apps through the Dock or COMMAND-Tab – which instantly switches you over to the correct screen. After I figured this out I don’t do any manual desktop switching – which is easy enough to do. The one hitch I’ve had is I often use CNTRL-Arrow in text editing, so I have to find another default key to switch my spaces.

Screen sharing is easily turned on if you want to use the “Back to my Mac” .mac feature or just access your desktop from across the house using Chicken of the VNC or the built-in Screen Sharing app. Like all of the network services it’s off by default. The only thing that threw me was that turning on file sharing automatically allowed guest access to the public folders – though the guest account was otherwise disabled. While it’s easy enough to stop sharing out public folders or turn off ALL guest access, it did throw me.

Actually, I like how they implemented guest access in general. You can log in as “guest” and get a temporary, restricted workspace that erases itself when you are done. The next “guest” again gets a pristine, sandboxed space to access the web. This is a great way to give my kids access to my main desktop when they’re online…

Back to screen sharing for a minute. This has a few other implications. First, those of us in tech support and consulting can now easily access the computer of any client that we can iChat with. This feature also reduces the future need to install the more flexible VINE server on many client desktops, though the jury is still out on servers, depending on security needs. This is yet another way that a user-friendly feature will also be a big help for IT folk. it alsomeans that those of us with .mac accounts have less need for a service like GoToMyPC or LogMeIn.

Speaking of big help – Time Machine. This is possibly the biggest single reason to get Leopard – so that you can have effortless, consistent backups. I’ve lost count of how many clients do a poor job in maintaining backups. While it won’t help with keeping copies offsite, this feature will save a lot of headaches where it comes to “oops I deleted my file” or “oops, my hard drive died” in shops where we don’t have our hands on Retrospect enough to make sure that the users files are regularly backed up. Time machine makes this process almost effortless. One thing to beware of – If you have any Paralells or Fusion windows images, you may want to make them exceptions or back them up separately unless you’ve got a much, much bigger backup drive than your main drive. Aperture also has some issues with Time Machine

When installing this on my desktop, I noted a few other things. First of all, while the Sharepoints prefpane was still available, all of the SMB and Appletalk share configuration data had been wiped out. instead, those share points now were in the Apple sharing preference pane. Also, after opening Cronnix, I noticed that ALL of my scheduling CRON scripts were gone that I used for mounting my backup disks. Not much of a loss since I’ll be using time machine anyways, but you may want to back up your Crontabs if you’re geeky enough to use them. (I was using CRON to schedule applescripts and other scripts that I only wanted to run on my desktop instead of through iCal).

Insofar as most of my programs, here’s the rundown:

Mail improvements. Here’s where I got hurt the worst. While I don’t mind saying good bye to mail.appetizer (it can be obtrusive), Mailtags and Mail act-on effectively don’t work. The good news is that the creator is already making it Leopard-compatible, and the “Leopard” beta of mailtags is available. I’ll just hold off for the final version. That said, the note-taking ability is useful, the contact-data sensing is just phenomenal, and it can now indent without quoting! The templates are fluff, but slick fluff, and very well implemented. mail has always been great about letting you pick an alternate outbound server if you can’t reach your default, but now you can also choose a different outgoing server as you compose your email.

Inquisitor, an app that gives me instant search results as I type in Safari doesn’t work. It may never be updated as it relied on access to parts of the Safari WebKit code that Apple has severely restricted access to. I will miss it.

Transmit and Quicksilver seem to work fine overall (with updates) though the “open all files with this tag” feature of the tagging module needs updating. The growl notifications are working just great.

Chax has disappeared, but most of the features it provided were rolled into iChat anyway. As it is I’ll still be using Adium except when I need the new “theater” and “screen sharing” modes.

I haven’t run mine yet, but apparently Photoshop works, though may “crash” upon closing out the program. I know Adobe has posted some other issues but apparently the main graphics programs all work OK.

As noted previously, APE is (very) broken.

LiteIcon, an App that allows you to change the default system icons is broken. We’ll have to wait for an update on that or Candybar (from the iconfactory).

Desklickr doesn’t change the desktop out.

Google Earth needed me to reinstall/download the latest version on my laptop.

My Cisco VPN settings were wiped out. I am not sure yet if simply reinstalling will fix this. I WILL get a Time Machine backup first….

Tinkertool says that it is not fully compatible, but shouldn’t break anything, even if some effects are unexpected.

The Wacom drivers needed to be replaced with a new version.

Internet Explorer 5 (OSX version) still works as well as it ever did, for what it’s worth.

Other things that apparently still work:

• Bonjour Browser
• MagiCal
• Aleph One
• MythII
• MS Office
• FlickrUploader
• Synk (with an update)
• Canoscan drivers

Stuff I still need to test:

• Blender
• Emulators
• Freeciv
• Handbrake
• Lingon
• NeoOffice
• nethack
• Pic2Icon
• Picasa Web Albums

That’s it in a nutshell.

My initial impression upon looking at Apple’s 300+ features page was “Good Lord!” The second was “A lot of these are pretty minor.” Remembering that Apple has built its success on making the little stuff work so well it completely changes how you do things, I dug deeper, and came away impressed. When I get around to reviewing it the review will end up being a long one.

Many of the features are actually minor ones, small usability enhancements such as doing a Google maps search by clicking the address in the address book, or the ability to add a new contact to your address book by clicking on an address in the mail body even if they didn’t send you a vcard. Each of these is minor. Each of these nevertheless saves you time by minimizing the jumping around needed to do each task. That way you get back to your work quicker.

In other cases, it’s the combination of features that’s the big deal. Sure, 10.4 had parental controls in place and workable whitelisting that made similar controls built into Windows look anemic and weak. Apple didn’t rest on its laurels, and made improvements. I’m not impressed by “dynamic” filters, but they are now available for filtering web pages if you want. What really blows my mind is that on top of whitelisting allowed websites, email contacts, chat contacts, etc. you can also now control when certain users are even allowed to be on the computer at all. You can also do this from a remote computer across the house so you can centrally manage your parental policies.

For parents geeky enough to be using these features in the first place: whoah.

The biggest deal to me is that Apple, in conjunction with their iWork update, has taken one more step towardsa replacement for Exchange/Outlook/Office that many workplaces rely on. The iCal server integration features offer what 90% of Exchange users use shared calendars for. Now if we could get shared address books (a real one that can be easily updated like Exchange, that LDAP schema doesn’t count) and a Access-like database program integrated with iWork…

The long and the short of it is that it looks like a number of the small features may be small, but they can change how you work in ways that going back will feel like being crippled. Other features work together to be a really big deal. To tell the difference, as well as which features really are just fluff, will take time. To explain how this could  affect you or improve your computer usage will likely use a lot of space.

Don’t expect a full review from me anytime soon.

There are a number of places in Windows where Microsoft has solved an existing problem by overcorrecting, and causing other problems well down the road. One of the places this is currently most obvious in Vista is the way you are bombarded by a flurry of “allow/decline” messages every time you do anything that modifies the system. They had to do something about stuff getting installed behind your back, and opted for irritating overkill.

Another place is the registry.

The registry exists for a very good reason. Wayyyy back in the dark days of Windows 3 and DOS, getting your computer configured, adding hardware, and telling your machine where all of the programs were required editing a series of files scattered throughout the hard drive. Programs would place these configuration files in seemingly random locations, and many installation programs for new hardware or software would misread or worse, break the configuration files.

The benefits gained were many. System files were collected into one location where drivers and add-ons could easily find them. The same was true for program preferences. It provided a fast and consistent means of storing this information. Access to most of these settings was through control panels unless you jumped through hoops to manually edit them, reducing the number of potential errors. On top of that it’s structure as used in Windows 2000 and XP allowed corporate computer policies and settings to be configured and enforced centrally. All this was achieved without having to worry about file permissions. There’s even a degree of built-in backup, and many errors could be recovered using the last known good state.

That said, I’ve all too many times run into serious issues when the registry gets messed up. This could be the user settings loaded with your profile when you log in, or worse, the machine settings. How software installation, uninstallation, and reinstallation is handled also is much more difficult than it should be. Finally, it accumulates cruft over time.

Let’s tackle the last, first. Any system of settings can leave behind bits and pieces. Personal program preferences are the worst. Even on a Mac, deleting a program does not get rid of the preference files that store all of your settings. That said, these preferences aren’t read and loaded until their respective program loads, so all they do is tie up space on your hard drive, and have little or no impact. In Windows, if the uninstaller either deliberately leaves the preferences, or forgets them, they are now part of the ‘hive’, are loaded when the computer starts or when you log in, and are yet another point for the registry to become corrupted and fail, even if they are not being used. Besides, tying up this room in memory means longer load times and more memory used up that can be used to run programs, etc.

Remember — all things being equal, something more complex is more likely to break. That’s why we engineers value simplicity in design, and “Rube Goldberg” is something of an insult.

Programs entering themselves into the registry is also a reason for a common complaint among Windows users that Mac users find criminal – program portability. If you have to reinstall Windows in anything other than “repair” mode (and sometimes even then) you are virtually guaranteed to spend hours, if not days, reinstalling every piece of software on the computer. If you decide you will be using a certain program on your shiney new desktop, you can’t simply copy the program file over. By contrast, about the only programs on a Mac requiring full reinstallation are drivers and the Adobe suite. Everything else can run from any directory, and if it doesn’t find a set of preferences, creates a default. Many programs are installed by simply copying them to your hard drive and they can be moved or copied by simply dragging the programs to their new home. At worst you may have to copy the license file out of the system preferences as well, or re-key the license. You don’t even have to put them in the “Applications” folder — the equivalent of “Program Files” in Windows. Getting rid of those same programs is as easy as dragging them to the trash. This is possible because there is not a central registry that tracks locations of program files which breaks if you manually move the file, and because Mac programs are smart enough to create a default set of preferences.

What’s worse is when your registry gets corrupted. This can be corruption of the actual data, or corruption of the structure. Both can result in programs crashing, failing to start up, or worse, the computer never starting at all.

If the data is corrupt, then sometimes it can be manually tracked down and corrected. Usually this is easiest by removing and reinstalling the program, unless of course the uninstaller forgets to remove the relevant registry keys. If the structure is corrupt, it’s a nightmare. You cannot even access, much less delete, the relevant keys to fix the problem. At this point, getting the problem fixed becomes “interesting” in a chinese-curse way, and unless you have on tap very recent backups of the registry that are also clean, you will likely have to reinstall (in the case of system registry problems) or wipe the user account (user registry settings). Few things are more frustrating than trying to get a clean and functional user profile working in a roaming-profile environment.

In short, the registry had solved a number of problems, but has also brought a number of headaches along that just get worse and worse as a computer ages and more programs get added and removed. This is why many Windows experts would recommend a reinstall every year or two, and many tech support lines commonly ask you to reinstall Windows when troubleshooting a problem.

…except to make money off the fact that other people do depend on it.

To make a long story short, Microsoft had some issues with their database that determines if your computer has a valid copy of Windows Vista or XP on it, and the validation servers were unavailable. Many people all over the world had their computers automatically check in over those few days because they were installing a new copy of Windows or updating or installing something like Windows Defender that required a validation check. Those people were immediately placed in a “reduced” mode that shut off features on their computers.

update: Of course, this all makes my earlier rant on the problems of software activation schemes look prescient.

update2: And the guys from User Friendly throw in their two cents…

I normally don’t pay much attention to what John Dvorak has to say, but in this case I think he’s right.  He’s taken a look at the further implications of the Windows Activation outage and applied it to all web services by asking the question – is it any safer to depend on online access to your data?

Me, I take it with a grain of salt. I use online backups as a slower, redundant system in case a fire or something takes out the much faster backup system at the office. I use Flickr, and this blog as a way to communicate with other people. Both of these are things that I cannot do without the web.  There’s a bit of a gray line when it comes to services like Google Calendar – which I  sync or subscribe to via iCal so if I don’t have online access  I still have a copy of my data from the last time I got online, and a backup if they ever cancel that service. I go to the trouble because it allows my wife and I to keep a common calendar where I can refer to it when I’m off at work.

The only place I use an online document system is Googles notebook -  and that is also used strictly for communicating with the people I work with.

Anything else I do – image manipulation, document creation, general writing, I have my own tools on my own computers that will work whether or not the internet is available, and can always be attached as files and sent to people. Not wanting to depend on the availability of servers is one reason why I work this way. It just hadn’t occured to me to think in terms of “What if you have internet access but the service gets shut down.” After all, who’d have thought Google would shut a service down, especially after people paid for it?